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DETAILED OFFICE ACTION 

This office action is in response to an amendment filed 12/23/2009. 



Response to Arguments 



Applicant's arguments filed 07/24/2009 have been considered but are moot in 
view of the new ground(s) of rejection. 

On pages 10-11, Applicant argues that Kuriya does not disclose the feature of 
"deleting means for deleting the apparatus ID data after deleting the service ID data." 

In response. Examiner respectfully disagrees. As shown in Fig. 17, the apparatus 
ID as disclosed by Kuriya is deleted after the step of updating the usage conditions, 
during which the "check-out count" is updated with new value. As described in the Office 
Action, a value of this "check-out count" corresponds to the service ID since a given 
value of the "check-out count" can determine the service associated with the 
corresponding content a user can have (the user may be denied service if the permitted 
check-out count is zero). Also, as disclosed in Kuriya, the "permitted check-out count" 
information (with a corresponding "count" ©rvalue), e.g. shown at least in Figs. 11-12, 
can specify the check-in and/or check-out services and how the services should be 
performed. Further, the old value is updated with new value, at least it is clearly deleted. 
Therefore, Kuriya clearly discloses the feature of "deleting means for deleting the 
apparatus ID data after deleting the service ID data." 
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Also on pages 10-11, Applicant argues that Kuriya does not disclose the feature 
of "deleting means for producing a result of an authentication based on the user ID data 
and the apparatus ID data." 

In response, Examiner respectfully disagrees. At least in [0280]-[0284], Kuriya 
discloses an authentication process which involves both the user and the apparatus ID. 
It is clear that, in the context, the user must be identified via the user ID. Therefore, the 
result of such an authentication process must be produced based on both the user ID 
and the apparatus ID. 

On pages 11-12, Applicant argues that Halen does not disclose the feature of 
"transmitting means for transmitting a ticket to the external apparatus based on the 
result of the authentication." 

In response, Examiner respectfully disagrees. As described in the Office Action, 
Halen discloses this feature at least on page 8, lines 15-25 and page 9, lines 1 1-21 . The 
ticket is the authenticated result with a time stamp that is used for detecting replay 
attacks. 

Applicant's arguments on pages 12-13 with respect to claim 3 are found not 
persuasive for the same reason as discussed above. 

On page 13, Applicant argues that Kuriya does not disclose the feature of "the 
transmitting means transmits a request corresponding to the service ID data to a 
different external apparatus after the service ID data is deleted and before the 
apparatus ID data is deleted" since Kuriya does not disclose deleting the service ID. 
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In response, Examiner respectfully disagrees. The apparatus ID as disclosed by 
Kuriya is deleted after the step of updating the usage conditions, during which the 
"check-out count" is updated with new value. As described in the Office Action, a value 
of this "check-out count" corresponds to the service ID since a given value of the 
"check-out count" can determine the service associated with the corresponding content 
a user can have (the user may be denied service if the permitted check-out count is 
zero). Also, as disclosed in Kuriya, the "permitted check-out count" information (with a 
corresponding "count" or value), e.g. shown at least in Figs. 11-12, can specify the 
check-in and/or check-out services and how the services should be performed. Further, 
the old value is updated with new value, at least it is clearly deleted. Therefore, Kuriya 
clearly discloses the feature of "deleting means for deleting the apparatus ID data after 
deleting the service ID data. 

Natsuno discloses after the first step of the deleting process and before the last 
step of the deleting process, the transmitting means transmits a request corresponding 
to the service ID data to a different external apparatus as shown at least in Figs. 29 & 
30. When combined with Kuriya, one skilled in the art would arrive at having the 
transmitting means transmit the request after the service ID is deleted (as the first step) 
and before the apparatus ID data is deleted (as the last step). 

Therefore, Kuriya and Natsuno disclose the limitation of "the transmitting means 
transmits a request corresponding to the service ID data to a different external 
apparatus after the service ID data is deleted and before the apparatus ID data is 
deleted". 
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As such, Applicant's arguments are found not persuasive. 

Examiner Notes 

Examiner cites particular columns and line numbers in the references as applied 
to the claims below for the convenience of the applicant. Although the specified citations 
are representative of the teachings in the art and are applied to the specific limitations 
within the individual claim, other passages and figures may apply as well. It is 
respectfully requested that, in preparing responses, the applicant fully consider the 
references in entirety as potentially teaching all or part of the claimed invention, as well 
as the context of the passage as taught by the prior art or disclosed by the examiner. 
Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a whtten description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

Claims 3-4 are rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject 
matter which was not described in the specification in such a way as to 
reasonably convey to one sidlled in the relevant art that the inventor(s), at the 
time the application was filed, had possession of the claimed invention. 

Claim 3 recites, "another external apparatus having, data-transmitting means for 
transmitting the user ID data, the apparatus ID data and the service ID data to the 
information-processing apparatus, ID data storage means for storing the apparatus ID 
data, ID data deleting means for deleting the apparatus ID data stored in the ID data 
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storage means, deletion-request transmitting means for transmitting the request data 
requesting for the deletion, and completion-information receiving means for receiving 
the deletion-complete information," which contains subject matter which was not 
described in the specification in such a way as to reasonably convey to one skilled in 
the relevant art that the inventor(s), at the time the application was filed, had possession 
of the claimed invention. 

Claim Rejections - 35 USC S 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

Claims 1-2, 5-8, and 15-16 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kuriya et al (US 2001/0056404 A1, hereinafter Kuriya) and 
Natsuno et al (US 2002/0194474 Al, hereinafter Natsuno), further in view of Halen 
et al. (WO 03/028283 - hereinafter Halen). 

Regarding claim 1, Kuriya discloses an information-processing apparatus 
configured to delete information stored in accordance with a request made by a user for 
canceling a service (Fig. 17, elements S4106, S4206; Fig. 33, elements S11206, 11502, 
wlierein content, mobile teleplione ID, and ID of portable medium are deleted), 
comprising: 
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receiving means for receiving service ID data designating a specific service to be 
provided together with user ID data {Paragraphs [0034][0237], reception control means ; 
wherein user ID and the "permitted check-out count" information, which corresponds to 
service ID are received), from an external apparatus {Paragraph [0036], wherein, mobile 

telephone, personal computer, or a PDA corresponds to external apparatus), and for 
receiving the user ID data and apparatus ID data from the external apparatus ([0237]); 

storage means for storing the user ID data and the service ID data {Paragraphs 
[0034] [0044] [0069] [0420], storage control means), in association with the apparatus 
ID data which identifies the external apparatus and which has been registered 
{Paragraphs [0237] [0259], device ID denotes the ID of mobile phone, personal 
computer or PDA, which corresponds to apparatus ID) , wherein when user sends a 
request to purchase a content to the manager server, the request includes user ID, 
device ID, and content ID, which implies the device has been registered); 

deleting means for deleting the apparatus ID data after deleting the service ID 
{Fig. 17, elements S4106& S4206; Paragraphs [0267][0320][0324] - wherein updating 
the permitted check-out count results in the old value of the check-out count being 
deleted), when the receiving means receives request data requesting for a deletion of 
the apparatus ID data, the request data including the user ID data and the apparatus ID 
data {Paragraphs [0319-0320, 0324]), and for producing a result of an authentication 
based on the user ID data and the apparatus ID data ([0016][0213][0280]-[0284]). 
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Kuriya does not disclose transmitting means for transmitting a ticket to the 
external apparatus based on the result of the authentication, and for transmitting, to the 
external apparatus, deletion-complete information indicating that the deleting means 
has finished deleting, the ticket including time data representing a time of the 
authentication. 

Natsuno discloses transmitting means for transmitting, to an external apparatus, 
deletion-complete information indicating that the deleting means has finished deleting 
{Paragraphs [0034] [0038] [0115] [0130] [0139-0140], wherein a deletion completion 
notice is shown on the display of the mobile terminal). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the teachings of Kuriya into the system of Natsuno 
because it would provide for the purpose of saving memory area by deleting 
unnecessary information {Paragraph [0123]. It is also an indication that the deleting 
transaction is officially over, so that the resource can be recycled for other processes 
and updating purposes.) 

Kuriya and Natsuno do not disclose transmitting a ticket to the external apparatus 
based on the result of the authentication, the ticket including time data representing a 

time of the authentication. 

However, Halen discloses the transmitting means transmits a ticket to the 
external apparatus based on the result of the authentication (p. 9, lines 11-21), the ticket 
including time data representing a time of the authentication (p. 8, lines 15-25). 
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One of ordinary skill in the art at the time the invention was made would have 
been motivated to incorporate the teachings of Halen into the information-processing 
apparatus disclosed by Kuriya and Natsuno in order to detect replay attacks, i.e. 
attempt to use an old authenticated result several times, which may be harmful to the 

system {Halen, p. 8, lines 23-25). 

Regarding claim 2, Kuriya discloses the information-processing apparatus 
according to claim 1, wherein the external apparatus identified by the apparatus ID data 
stored in the storage means in association with the service ID data {Paragraphs [0259] 
[0262] [0267]), is requested to provide the service {Paragraph[0034] [0237]). 

Regarding claim 5, Kuriya discloses a communication method for use in an 
information-processing apparatus configured to delete information stored, in accordance 
with a request made by a user for canceling a service (Fig. 17, elements S4106, S4206; 
Fig. 33, elements S11206, 11502, wherein content, mobile telephone ID, and ID of 
portable medium are deleted) , comprising: 

receiving, from an external apparatus, service ID data designating a specific 

service to be provided, together with user ID data and apparatus ID data identifying the 
external apparatus {Paragraphs [0034][0038][0237], reception control means ; wherein 
user ID and "permitted check-out count" information which corresponds to service ID 
are received; mobile telephone, personal computer, or a PDA corresponds to external 
apparatus); 



Application/Control Number: 10/567,689 Page 10 

Art Unit: 2437 

storing the user ID data, the apparatus ID data and the service ID data, in 
association with one another data {Paragraphs [0044][0259] [0420], storage control 
means; device ID denotes the ID of mobile phone, personal computer or PDA, which 
con-esponds to apparatus ID); 

authenticating the user ID data and the apparatus ID data to produce an 
authentication result {[0281]) 

deleting, with a processor, the apparatus ID data after deleting service ID data, 
when request data requesting for a deletion of the apparatus ID data is received, the 
request data including with the user ID data and the apparatus ID data {Fig. 17, 
elements S4106 & S4206; Paragraphs [0319][0320][0324]). 

Kuriya does not disclose transmitting a ticket to the external apparatus, based on 
the authentication result, the ticket including data representing a time of the 
authenticating; transmitting, to the external apparatus, deletion-complete information 
indicating that the deleting means has finished deleting. 

However, Natsuno discloses transmitting, to the external apparatus, deletion- 
complete information indicating that the deleting means has finished deleting 
{Paragraphs [0139-0140], wherein a deletion completion notice is shown on the display 
of the mobile terminal). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the teachings of Natsuno into the system of Kuriya 
because it would provide for the purpose of saving memory area by deleting 
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unnecessary information {Paragraph [0123]. It is also an indication that the deleting 
transaction is officially over, so that the resource can be recycled for other processes 
and updating purposes.) 

Kuriya and Natsuno do not disclose transmitting a ticl<et to tine external apparatus 
based on the result of the authentication, the ticket including time data representing a 
time of the authentication. 

However, Halen discloses the transmitting means transmits a ticket to the 
external apparatus based on the result of the authentication {p. 9, lines 11-21), the ticket 
including time data representing a time of the authentication (p. 8, lines 15-25). 

One of ordinary skill in the art at the time the invention was made would have 
been motivated to incorporate the teachings of Halen into the information-processing 

apparatus disclosed by Kuriya and Natsuno in order to detect replay attacks, i.e. 
attempt to use an old authenticated result several times, which may be harmful to the 
system {Halen, p. 8, lines 23-25). 

Regarding claim 6, Kuriya discloses a computer-readable medium including a 
communication program for use in an information-processing apparatus configured to 

delete information stored, in accordance with a request made by a user for canceling a 
service (Fig. 17, elements S4106, S4206; Fig. 33, elements S1 1206, 11502, wherein 
content, mobile telephone ID, and ID of portable medium are deleted), wherein the 
communication program when executed by a computer causes the computer to perform 
a method comprising: 
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receiving, from an external apparatus, service ID data designating specific 
service to be provided, together with user ID data and apparatus ID data identifying the 
external apparatus {Paragraphs [0034][0038][0237], reception control means ; wherein 
user ID "permitted check-out count" infonmation which corresponds to service ID are 
received; mobile telephone, personal computer, or a PDA corresponds to external 
apparatus); 

storing the user ID data, the apparatus ID data and the service ID data, in 
association with one another {Paragraphs [0044][0259] [0420], storage control means; 
device ID denotes the ID of mobile phone, personal computer or PDA, which 
con-esponds to apparatus ID); 

authenticating the user ID data and the apparatus ID data to produce an 
authentication result {[0281]): 

deleting the apparatus ID data after deleting the service ID data, when request 
data requesting for a deletion of the apparatus ID data is received, the request data 
including the user ID data and the apparatus ID data(F/gf. 17, elements S4106 & S4206; 
Paragraphs [031 9][0320][0324]) . 

Kuriya does not disclose transmitting, to the external apparatus, deletion- 
complete information indicating that the deleting means has finished deleting. 

However, Natsuno discloses transmitting, to an external apparatus, deletion- 
complete information indicating that the deleting means has finished deleting 
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{Paragraphs [0034][0039]-[0040] [0139-0140], wherein a deletion completion notice is 
shown on the display of the mobile terminal). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the teaching of Kuriya into the system of Natsuno 
because it would provide for the purpose of saving memory area by deleting 

unnecessary information {Paragraph [0123]. It is also an indication that the deleting 
transaction is officially over, so that the resource can be recycled for other processes 
and updating purposes.) 

Kuriya and Natsuno do not disclose transmitting a ticket to the external apparatus 
based on the result of the authentication, the ticket including time data representing a 
time of the authentication. 

However, Halen discloses the transmitting means transmits a ticket to the 
external apparatus based on the result of the authentication (p. 9, lines 11-21), the ticket 
including time data representing a time of the authentication (p. 8, lines 15-25). 

One of ordinary skill in the art at the time the invention was made would have 
been motivated to incorporate the teachings of Halen into the information-processing 

apparatus disclosed by Kuriya and Natsuno in order to detect replay attacks, i.e. 
attempt to use an old authenticated result several times, which may be harmful to the 
system {Halen, p. 8, lines 23-25). 

Claim 7 is rejected for the same rationale as claim 1 above. 
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Regarding claim 8, Kuriya in view of Natsuno discloses information-processing 
apparatus according to claim 1 . Although Kuriya does not disclose the transmitting 
means transmits a request corresponding to the service ID data to a different external 
apparatus after the service ID data is deleted and before the apparatus ID data is 
deleted, but Kuriya discloses the sequence of steps for checking In the content In 
response to a check-in request, in which after receiving the content check-In request In 
step S4202, the Manager Server performs updating usage conditions in step S4205 as 
the first step and lastly, deleting the apparatus ID at step S4206. Updating usage 
conditions requires updating the content management table as described In [0257], 
[0267], and [0258], during which the updating of the "permitted check-out count" 
information is performed. Examples of such a content management table are shown in 
Figs. 18-20, and Fig. 22. According to Kuriya's teachings, it is obvious to delete 
apparatus ID data after deleting service ID data (updating of the "permitted check-out 
count" Information), which Is performed during the step of updating usage conditions. As 
such, according to the sequence of steps for checking in the content in response to a 
check-in request illustrated in Fig. 17 as described above, updating the usage 
conditions, during wtiicti deleting of the service ID is performed (updating of the 
"permitted checl<-out count" information), is the first step to be executed in the deleting 
process and deleting of the apparatus ID data is the last step to be performed in the 
deleting process. 
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Natsuno discloses after the first step of the deleting process and before the last 
step of the deleting process, the transmitting means transmits a request corresponding 
to the service ID data to a different external apparatus {Figs. 29 & 30). 

Therefore, Kuriya and Natsuno disclose the limitation of "the transmitting means 
transmits a request corresponding to the service ID data to a different external 
apparatus after the service ID data is deleted and before the apparatus ID data is 
deleted". 

Regarding claim 15, Kuriya and Halen also disclose the information-processing 
apparatus according to claim 1 , wherein the transmitting means transmits the ticket to 
the external apparatus in response to a reception of the user ID data, the apparatus ID 
data and the service ID data by the receiving means (Kuriya, 
[0034][0036][0213][0237][0280]-[0284]; Halen, p. 8, lines 15-25, p. 9, lines 11-21 - 
wherein at least [0213] the authentication process, and therefore any authentication 
ticket, as disclosed occurs in response to a service request). 

Regarding claim 16, Halen also discloses the information processing apparatus 

according to claim 1 , wherein the deleting means confirms, based on the time data, an 
authenticity of the ticket, upon a reception of the ticket by the receiving means (p. 8, 
lines 15-25, p. 9, lines 11-21). 



Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kuriya et al (US 2001/0056404 A1, hereinafter Kuriya), in view of Natsuno et al (US 
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2002/0194474 A1, hereinafter Natsuno), Halen et al. (WO 03/028283 - hereinafter 
Halen), and further in view of Flanagin et al (US 6,128,661, hereinafter Flanagin). 

Regarding claim 3, Kuriya discloses an information-processing system 
configured to delete information stored, in accordance with a request made by a user for 

canceling a service (Fig. 17, elements S4106, S4206; Fig. 33, elements S11206, 11502, 
wlierein content, mobile telephone ID, and ID of portable medium are deleted), the 
information-processing system comprising: 

an information-processing apparatus having receiving means for receiving 
service ID data designating a specific service to be provided, together with user ID data 
identifying the user {Paragraphs [0034][0038] [0237]; reception control means; wherein 
user ID and "permitted check-out count" information which corresponds to service ID 
are received) and apparatus ID data identifying an external apparatus {Paragraphs 
[0108][0113][0259], wherein device ID denotes the ID of mobile phone, personal 
computer or PDA, which con-esponds to external apparatus) , 

storage means {Paragraph [0034][0044], storage control means) for storing the 

user ID data, the apparatus ID data and the service ID data, in association with one 
another (Paragraphs [0237] [0259] [0420]), {Fig. 17, elements S4106 & S4206; 
Paragraphs [0319][0320][0324]), 

authentication means for performing an authenticating process in accordance 
with the user ID data and the apparatus ID data to produce an authentication result 
{[0016][0213][0280]-[0284]) 
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deleting tlie apparatus ID data after deleting the service ID data, wlien request 
data requesting for a deletion of the apparatus ID data is received, the request data 
including the user ID data and the apparatus ID data(F/g. 17, elements S4106 & S4206; 
Paragraphs [0319][0320][0324]), and 

transmitting means for transmitting, to the external apparatus {Paragraphs 

[0039]-[0040]; transmission control means, wherein content is transmitted to information 
processing apparatus, which corresponds to external apparatus) 

and another external apparatus having data-transmitting means for transmitting 
the user ID data, the apparatus ID data and the service ID data to the information- 
processing apparatus {Paragraphs [0034][0043]][0237], wherein another mobile 
telephone or device associated with the same user as shown at least in Figs. 8 and 15, 
which corresponds to the recited another external apparatus transmits a request for 
purchasing a content to manager server. The request includes user ID, apparatus ID 
and service ID), ID data storage means for storing the apparatus ID data {Fig. 14, 
element S3107; Fig. 17, element S4109, wherein the stored content is associated with 
user ID, apparatus ID, and service ID), deletion-request transmitting means for 
transmitting the data requesting for the deletion {Fig. 33, element S111 06), and 

Kuriya does not disclose transmitting means for transmitting a ticket to the 
external apparatus, based on the authentication result, and for transmitting deletion- 
complete information indicating that the deleting means has finished deleting, and 
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completion-information receiving means for receiving the deletion-complete information, 
the ticket including time data representing a time of the authenticating process. 

However, Natsuno discloses transmitting means for transmitting deletion- 
complete information indicating that the deleting means has finished deleting the 
features requested by user {Paragraphs [0139-0140], wherein a deletion completion 
notice is shown on the display of the mobile terminal). 

Furthermore, Natsuno also discloses completion-information receiving means for 
receiving the deletion-complete information {Paragraphs [0139-0140], wherein a 
deletion completion notice is shown on the display of the mobile tenminal. It is also an 
indication that the deleting transaction is officially over, so that the resource can be 
recycled for other processes and updating purposes). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the teachings of Natsuno into the system of Kuriya 
because it would provide for the purpose of saving memory area by deleting 
unnecessary information from storage {Paragraph [0123]) 

Kuriya and Natsuno do not disclose transmitting a ticket to the external apparatus 
based on the result of the authentication, the ticket including time data representing a 
time of the authentication. 

However, Halen discloses the transmitting means transmits a ticket to the 
external apparatus based on the result of the authentication (p. 9, lines 11-21), the ticket 
including time data representing a time of the authentication {p. 8, lines 15-25). 
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One of ordinary skill in the art at the time the invention was made would have 
been motivated to incorporate the teachings of Halen into the information-processing 
apparatus disclosed by Kuriya and Natsuno in order to detect replay attacks, i.e. 
attempt to use an old authenticated result several times, which may be harmful to the 

system {Halen, p. 8, lines 23-25). 

Kuriya, Natsuno and Halen do not disclose an ID data deleting means for 
deleting the apparatus ID stored. 

However, Flanagin discloses deleting means for deleting the apparatus ID data 
stored (Col. 11, lines 59-67; Col. 12, lines 2-18, wherein the device name which 
corresponds to the apparatus ID data can be changed by the user, which implies there 
exists a deleting means for deleting the apparatus ID in order to change its name) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to incorporate the teachings of Flanagin into the system of Kuriya, 
Natsuno, and Halen because it would provide for the purpose of having a unique 
apparatus ID that does not correspond to any other partnership on the device that it 
comes into communication with (Co/. 12, lines 7-18). 

Claim 4 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kuriya et al (US 2001/0056404 A1, hereinafter Kuriya), Natsuno et al (US 
2002/0194474 Al, hereinafter Natsuno), Halen et al. (WO 03/028283 - hereinafter 
Halen), Flanagin et al (US 6,128,661, hereinafter Flanagin), and further in view of 
Takeuchi (US 2003/0134615 Al). 
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Regarding claim 4, Kuriya, Natsuno, Halen and Flanagin disclose the 
information-processing system according to claim 3, wherein: the information- 
processing apparatus has authenticating means issuing an authentication session ID 
that identifies a session with the external apparatus {Paragraphs [001 6][021 3]). 

Kuriya, Natsuno, Halen and Flanagin do not disclose the transmitting means 
transmits the authentication session ID to the external apparatus 

the external apparatus transmits the service ID data, together with the 
authentication session ID received from the information-processing apparatus; 

the information-processing apparatus verifies the authentication session ID 
received, and issues an authentication ticket corresponding to the service ID data 
received; 

the transmitting means transmits the authentication ticket to the external 
apparatus; 

the data-transmitting means of the external apparatus transmits a service- 
requesting signal to a server which provides the service, together with the 
authentication ticket received, the service-requesting signal requesting that the server 
should provide the service. 

However, Takeuchi discloses the transmitting means transmits the authentication 
session ID to the external apparatus {Paragraphs [0017] [0071], wherein access key 
which corresponds to session ID is transmitted to external apparatus). 
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the external apparatus transmits the service ID data, together with the 
authentication session ID received from the information-processing apparatus 
(Paragraphs [0017] [0071] [0074] wherein external device transmits sen/ice requested 
(corresponds to service ID data) along with access key received to service provision 
server); 

the information-processing apparatus verifies the authentication session ID 
received, issues an authentication ticket corresponding to the service ID data received 
to external apparatus {Paragraphs [0018] [0075], wherein when receives access key 
from external apparatus, service provision server verifies that key matches with key 
from issuance server, if they match, service provision server issues an infonmation for 
providing service, which corresponds to authentication ticket); 

the transmitting means transmits authentication ticket to the external apparatus 
{Paragraphs [0018] [0071], wherein service provision server transmits information for 
providing the service to external apparatus); 

the data-transmitting means of the external apparatus transmits a service- 
requesting signal to a server which provides the service, together with the 
authentication ticket received, the service-requesting signal requesting that the server 
should provide the service {Paragraphs [001 7][0071][0074][0083], wherein the service 
user receives service after the service provider performed verification). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to incorporate the teaching of Takeuchi into the system of Kuriya 
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Natsuno, Halen and Flanagin because it would provide for the purpose of providing a 
simplified steps of authentication to users, to prevent unauthorized access by 
performing reliable authentication. 

Claim 9 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kuriya et a! (US 2001/0056404 A1, hereinafter Kuriya) and Natsuno et al (US 
2002/0194474 Al, hereinafter Natsuno), Halen et al. (WO 03/028283 - hereinafter 
Halen), Takeuchi (US 2003/0134615 Al), and further in view of Kunigita (US 
2003/0078723). 

Regarding claim 9, Kuriya, Natsuno, and Halen disclose the information- 
processing apparatus according to claim 1 . 

Kuriya, Natsuno, and Halen do not disclose the deleting means compares the 
ticket with a ticket received by the receiving means, and the deleting means generates 
authentication-error information when the ticket received by the receiving means is not 
received within a predetermined term from the time of the authentication. 

Takeuchi discloses means for comparing a ticket with a ticket received by the 
receiving means {Paragraphs [0018] [0075], wherein when receives access key from 
external apparatus, service provision sen/er verifies that l<ey matches with l<ey from 
issuance server, if they match, service provision server issues an information for 
providing service which corresponds to authentication ticket). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to incorporate the teachings of Takeuchi into the system of Kuriya 
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and Natsuno because it would provide for the purpose of providing a simplified steps of 
authentication to users, to prevent unauthorized access by performing reliable 
authentication. 

Kuriya, Natsuno, and Takeuchi do not disclose the deleting means generates 
authentication-error information when the ticket received by the receiving means is not 
received within the predetermined term from the time of the authentication. 

However, Kunigita discloses generating authentication-error information when 
the authentication-session ID received by the receiving means is not received within the 
predetermined term from the time of the authentication {i.e: [0059] [0060]). 

One of ordinary skill in the art at the time the invention was made would have 
been motivated to incorporate generating authentication-error information disclosed by 
Kunigita into the deleting means in the system disclosed by Kuriya, Natsuno, and 
Takeuchi in order to enhance the user interface of the system by providing a means for 
user to be notified of the status of the authentication process. 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of tine extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to PHY ANH VU whose telephone number is (571)270- 
7317. The examiner can normally be reached on Mon-Thr 7:30-5:00 EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on 571-272-3865. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/PHYANH VU/ 
Examiner, Art Unit 2437 



/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2437 



